NetSPI
Best suited for
- Security focus
NetSPI offers Penetration testing, Security testing, Red teaming, Secure code review, Attack surface management; holds CREST, each confirmed by a register entry or the certificate itself; publishes 2 case studies.
Security testing is offered, together with either penetration testing or a verified ISO/IEC 27001 certificate, and at least one published case study.
- Nearshore for the USA
NetSPI delivers from the USA, Canada, the UK, India.
At least one delivery location in Canada, Mexico, Central America or South America.
Facts
| Headquarters | Minneapolis, the USA |
|---|---|
| Delivery locations | the USA, Canada, the UK, India |
| Team size | 501-1000 people |
| Founded | 2001 |
| Ownership | Independent |
| Services | Penetration testing, Security testing, Red teaming, Secure code review, Attack surface management |
| Industries | Banking, Healthcare, Insurance |
| Frameworks | Not published |
| Engagement models | Managed testing service, Continuous testing program |
| Client stages | Not published |
| Certificates | CRESTregister entry |
| Signs a BAA / GDPR DPA | Not confirmed / Not confirmed |
| Published rates | Not published |
| Minimum project | Not published |
| Onboarding | Not published |
| Crowd tester pool | Not published |
| Device lab | Not published |
Certificates the company claims
SOC 2claimedcompany pageCyber Essentialsclaimedcompany pageThese certificates are not confirmed by a registry entry, a certificate document or an auditor report. Each one is what the company says about itself on the page linked beside it, read on the date shown there. They are listed apart from confirmed certificates and are not counted anywhere the catalog counts certificates: not in the rankings tables, not in the applicability tags, not in comparisons.
Reviews on external platforms
- G24.9 out of 5, 11 reviewstaken on September 2, 2026
This catalog collects no reviews of its own. Review counts and scores are aggregates from external platforms, shown with the date they were read.
Named clients
- Microsoftpublicly tradednetspi.com
- Medtronicpublicly tradednetspi.com
- Chubbpublicly tradednetspi.com
- Trimblepublicly tradednetspi.com
Rankings this company appears in
- Industry: Banking position 51 of 74
- Industry: Insurance position 20 of 28
- Industry: Healthcare position 51 of 78
- Type of testing: Security testing position 34 of 47
- Type of testing: Penetration testing position 28 of 41
- Type of testing: Red teaming position 17 of 24
- Type of testing: Secure code review position 7 of 10
- Type of testing: Attack surface management position 4 of 7
- Engagement model: a managed testing service position 30 of 42
- Engagement model: a continuous testing program position 8 of 12
- Delivery location: the USA position 32 of 54
- Delivery location: Canada position 5 of 12
- Delivery location: the UK position 20 of 28
- Delivery location: India position 17 of 26
- Delivery location: Europe position 64 of 72
- Delivery proximity: nearshore for a buyer in the USA position 9 of 24
Compared with
Sources
- NetSPI: homepage (Proactive Cyber Security | PTaaS, ASM, BAS)Checked on September 2, 2026. States client mix: major cloud providers, top U.S. banks, healthcare companies, technology companies, cyber insurance providers.
- NetSPI | LinkedIn: company pageChecked on September 2, 2026. Company size 501-1,000 employees, headquarters 241 5th Ave N, Suite 1200, Minneapolis, Minnesota 55401, US, founded 2001, industry Computer and Network Security.
- NetSPI: CREST Marketplace member profile (accreditation registry)Checked on September 2, 2026. CREST's own directory entry: active member of 10 years, accreditations for Penetration Testing and Threat Led Penetration Testing (formerly STAR ILPT), geographic coverage Europe and North America.
- NetSPI: Penetration Testing as a Service (PTaaS) overviewChecked on September 2, 2026. Lists application, network, cloud, hardware/embedded, mainframe, and AI/LLM pentesting plus red team, social engineering, secure code review, threat modeling, detective controls testing and cybersecurity maturity assessment. Describes continuous pentesting, point-in-time testing and a subscription-based platform.
- The NetSPI Platform - Penetration Testing as a Service (PTaaS) Reviews | G2Checked on September 2, 2026. Direct fetch returned HTTP 403; rating/count corroborated across multiple independently indexed G2 pages for this product and related solution pages (search result titles read 'Read 11 Reviews on G2'; snippet states 4.9 out of 5 stars, 11 reviews, 90% 5-star / 9% 4-star).
- NetSPI Raises $410 Million in Growth Funding from KKR: press release (PR Newswire)Checked on September 2, 2026. Confirms growth-equity investment (not an acquisition) from KKR and Ten Eleven Ventures; describes NetSPI as headquartered in Minneapolis, MN, with global offices across the U.S., Canada, the UK, and India.
- Trust - NetSPI Security Certifications & Compliance FrameworksChecked on September 2, 2026. Vendor's own trust page. Claims CREST, SOC 2 Type II, Cyber Essentials Plus and CBEST accreditations, and states alignment with GDPR, CCPA and OWASP best practices. Self-claims only; not used to verify any certification except where corroborated by an independent registry (CREST, s3). No direct statement that NetSPI itself signs a BAA or a GDPR DPA on request.
- Customer Stories - NetSPI (index page)Checked on September 2, 2026. Index of named-client case studies, including Microsoft, Trimble, Quantum Health, EAB Global, Chubb, Medtronic, and others.
- How NetSPI Helped Microsoft Build Trust in AI Security with a Framework That Delivers ResultsChecked on September 2, 2026
- Medtronic works with NetSPI to identify and protect its network perimeterChecked on September 2, 2026
- Chubb partners with NetSPI to bring Attack Surface Management (ASM) to its policyholdersChecked on September 2, 2026
- Trimble enhances and secures product development with NetSPI PTaaSChecked on September 2, 2026
- EAB Global improves attack surface security within 15 seconds using NetSPI Attack Surface Visibility SolutionsChecked on September 2, 2026. Client: EAB Global, higher education services, ~2,000 employees, HQ Washington D.C. Metric: attack-surface questions previously requiring manual checks across 5+ disconnected tools now answered in seconds; identified 20 employees using unauthorized vulnerable VPN software.
- Quantum Health: Redefining Benefits Navigation with Proactive Engagement and Cost SavingsChecked on September 2, 2026. Client: Quantum Health, healthcare benefits navigation, ~2,000-3,000 employees. Metric: $700,000 in annual savings (11x ROI) from Detective Controls Testing engagement.
Every field on this profile records which of these sources it came from. The profile was last rebuilt from them on September 2, 2026. A field no source confirms is left empty rather than estimated.
Published by QA Rating
Every fact about a company comes from a listed source. A field without a source stays empty. A certificate counts as confirmed only when a registry, certificate or auditor report backs it; a certificate the company only claims about itself is published separately, under that label. Vendors can request a correction at hello@qa-rating.com. A correction is applied when it comes with a public source. Last checked on September 2, 2026.
Badge for your site
If you work at NetSPI, you can put a badge linking to this profile on your own site. It is free, it is not tied to any tier, and the badges page explains what each badge claims and when it should come down.
NetSPI
<a href="https://qa-rating.com/companies/netspi/"> <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI listed in QA Rating"> <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/> <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text> <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Listed in QA Rating</text> </svg> </a><a href="https://qa-rating.com/companies/netspi/"> <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI: profile checked 2026 in QA Rating"> <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/> <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text> <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Profile checked 2026</text> </svg> </a><a href="https://qa-rating.com/companies/netspi/"> <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI grouped under Nearshore for the USA in QA Rating, 2026"> <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/> <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text> <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Nearshore for the USA, 2026</text> </svg> </a><a href="https://qa-rating.com/companies/netspi/"> <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="NetSPI grouped under Security focus in QA Rating, 2026"> <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/> <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">NetSPI</text> <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Security focus, 2026</text> </svg> </a>